Skip to content

Anvil v1.0.0

Choose a tag to compare

View all tags
@BSVanon BSVanon released this 31 Mar 17:17
v1.0.0
7878482

Anvil v1.0.0

First major release. Security-hardened, fully audited, hackathon-ready.

Security

  • 10-tool security audit (govulncheck, gosec, staticcheck, semgrep, gitleaks, syft, grype, race detector, go vet, coverage)
  • gosec findings: 172 → 43 (all remaining reviewed and accepted with rationale)
  • Payment signature validation: go-sdk script interpreter verifies nonce input P2PKH signatures
  • anvil upgrade now verifies SHA256 checksums (same supply chain security as install script)
  • Nginx H2C smuggling fix
  • Go 1.26.1 (all stdlib CVEs resolved)
  • Supply chain verified: all deps tagged, checksums match, no install hooks

New Features

  • Address watching — 5 new endpoints (/mempool/watch/*). P2PKH output matching, spend detection, LevelDB persistence, SSE streaming
  • On-demand BEEF proofs — GET /tx/{txid}/beef fetches and builds proofs for any confirmed transaction
  • Mesh TX relay — transactions propagate between mesh peers via announce/request/response protocol
  • BEEF-on-send — wallet send response includes BEEF for offline SPV verification
  • Oracle slash fix — removed false-positive double-publish detection

Install / Upgrade

# Fresh install
curl -fsSL https://raw.githubusercontent.com/BSVanon/Anvil/v1.0.0/scripts/install.sh | sudo bash

# Upgrade existing node
sudo anvil upgrade

Requirements

  • Linux (amd64 or arm64)
  • 512 MB RAM minimum
  • 500 MB disk

Full changelog: v0.7.4...v1.0.0

Assets 5
Loading